IN THE CLAIMS 

Please amend the claims as follows: 



1 1. (Amended) A method for protecting the security of a cookie stored within a data 

2 processing system, said method comprising: 

3 storing a encryption key pair having a private key and a public key in a protected 

4 storage device within said data processing system; 

5 in response to the receipt of a cookie generated by an application from a remote 

6 server, encrypting said cookie with said public key; 

e 7 storing said encrypted cookie in a non-protected storage device within said data 

8 processing system; 

9 in response to an access request for said encrypted cookie by a browser program 

10 executing within said data processing system, decrypting said encrypted cookie with said 
I n private key; and 

12 sending said decrypted cookie to said browser program. 

1 2. (Amended) The method according to claim 1, wherein said non-protected storage device 

2 is a hard drive. 

1 3. (Amended) The method according to claim 1, further comprising providing an encryption 

2 device having an encryption engine and said protected storage device accessible only through said 

3 encryption engine. 

1 4. (Amended) The method according to claim 3, wherein said encrypting further include 

2 encrypting said cookie utilizing said encryption device. 
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1 5. (Amended) The method according to claim 4, wherein said decrypting further includes 

2 decrypting said encrypted cookie utilizing said encryption device. 

1 6. (Amended) The method according to claim 5, wherein said sending further includes 

2 transmitting said decrypted cookie from said encryption device to said browser program. 

1 7. (Amended) The method according to claim 6, further comprising transmitting said 

2 decrypted cookie from said browser program to an application executing in a remote server. 

1 10. (Amended) A data processing system capable of protecting the security of a cookie stored 

2 within said data processing system, said data processing comprising: 

3 a protected storage device for storing a encryption key pair having a private key 

4 and a public key in a protected storage device within said data processing system; 

5 means for utilizing said public key to encrypt said cookie, in response to the 

6 receipt of a cookie generated by an application from a remote server; 

7 a non-protected storage device within said data processing system for storing 

8 encrypted cookie; 

9 means for utilizing said private key to decrypt said encrypted cookie, in response 

10 to an access request for said encrypted cookie by a browser program executing within said 
n data processing system; and 

12 means for sending said decrypted cookie to said browser program. 

1 11. (Amended). The data processing system according to claim 1 0, wherein said non-protected 

2 storage device is a hard drive. 
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1 12. (Amended) The data processing system according to claim 10, further comprising an 

2 encryption device having an encryption engine and said protected storage device accessible only 

3 through said encryption engine. 

1 13. (Amended) The data processing system according to claim 12, wherein said means for 

2 utilizing said public key to encrypt said cookie is said encryption engine. 

l 14. (Amended) The data processing system according to claim 13, wherein said means for 

q \ 2 utilizing said private key to decrypt said encrypted cookie is said encryption device. 

1 15. (Amended) The data processing system according to claim 14, wherein said sending means 

2 further includes means for transmitting said decrypted cookie from said encryption device to said 

3 browser program. 

1 16. (Amended) The data processing system according to claim 15, further comprising means 

2 for transmitting said decrypted cookie from said browser program to an application executing in 

3 a remote server. 



Please c 




Claims 17-19. 



REMARKS 

Claims 8-9 and 17-19 have been cancelled. Thus, Claims 1-7 and 10-16 are currently 
pending in the present application, all of which have been amended. 

A proposed Figure 2 is enclosed herein for the Examiner's approval. 

Rejection under 35 U.S.C. $ 101 

Claim 10 was rejected under 35 U.S.C. § 101 because the claimed invention is directed 
to non-statutory subject matter. Applicants respectfully traverse such rejection insofar as it might 
apply to the claims as amended herein. 
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